timmerk / volatility

Automatically exported from code.google.com/p/volatility
GNU General Public License v2.0
0 stars 0 forks source link

Object warning using filescan #346

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
The filescan command displays some warning messages I can't explain:

C:\Micha\Forensics\Volatility-2.2a>python vol.py filescan -f 
"D:\X-Ways-Images\Malware\stuxnet.vmem"  | egrep -i ".pnf"
Volatile Systems Volatility Framework 2.2_alpha
WARNING : volatility.obj      : NoneObject as string: Header not set
...
WARNING : volatility.obj      : NoneObject as string: Header not set
0x01dfa028      1      0 R--r-- \Device\HarddiskVolume1\WINDOWS\inf\oem7A.PNF
0x01e0d028      1      0 -WD--- \Device\HarddiskVolume1\WINDOWS\inf\mdmeric3.PNF
WARNING : volatility.obj      : NoneObject as string: Header not set
WARNING : volatility.obj      : NoneObject as string: Header not set
WARNING : volatility.obj      : NoneObject as string: Header not set
0x021b53c8      1      0 RW---- \Device\HarddiskVolume1\WINDOWS\inf\mdmcpq3.PNF

Do I miss something?

CU

Mic

Original issue reported on code.google.com by MichaelF...@gmx.net on 6 Sep 2012 at 1:32

GoogleCodeExporter commented 9 years ago
This issue was closed by revision r2316.

Original comment by michael.hale@gmail.com on 6 Sep 2012 at 9:44